Penetration Testing

FEBRUARY 5, 2024

In January 2024, FortiGuard Labs uncovered a disturbing Excel document that served as the initial gateway to a sinister malware campaign.

Penetration Testing 108

Penetration Testing Malware Hacking 108

Security Affairs

JANUARY 1, 2024

Subsequently, other malware integrated the exploit, including Rhadamanthys, Risepro, Meduza , Stealc Stealer and recently the White Snake. The researchers discovered that the malware targets Chrome’s token_service table of WebData to extract tokens and account IDs of chrome profiles logged in. ” continues the report.

Malware 127

Malware Penetration Testing Passwords Encryption 127

Penetration Testing

APRIL 23, 2024

A sophisticated hacking group suspected to be the infamous CoralRaider is ramping up its attacks, using multiple well-known infostealers to target a shockingly wide range of organizations worldwide.

Penetration Testing 109

Penetration Testing Hacking Malware 109

Penetration Testing

APRIL 20, 2024

A new campaign orchestrated by the notorious APT29 hacking group – widely associated with Russia’s Foreign Intelligence Service (SVR) – exposes a dangerous shift in tactics for this sophisticated threat actor. The group has... The post WINELOADER: A Tool for Espionage and Disruption appeared first on Penetration Testing.

Penetration Testing 95

Penetration Testing Hacking Malware 95

Penetration Testing

APRIL 25, 2024

MuddyWater, an Iranian state-backed hacking group, is exploiting the legitimate remote monitoring and management (RMM) solution... The post Iranian Hacker Group MuddyWater Abuses Legitimate Atera Software to Target Global Organizations appeared first on Penetration Testing.

Penetration Testing 85

Penetration Testing Software Hacking Malware 85

Penetration Testing

APRIL 22, 2024

Microsoft has exposed a sophisticated new tool in the arsenal of the Russian state-backed hacking group “Forest Blizzard.”

Penetration Testing 95

Penetration Testing Hacking Malware 95

CSO Magazine

APRIL 28, 2022

Several threat groups believed to be initial access facilitators for some ransomware gangs are transitioning to a new first-stage malware downloader dubbed Bumblebee. The malware is used to deploy known penetration testing implants such as Cobalt Strike, Sliver and Meterpreter.

Malware 82

Malware Penetration Testing Ransomware Hacking 82

Penetration Testing

MARCH 21, 2024

Cybersecurity researchers at Proofpoint have uncovered a new wave of targeted phishing attacks attributed to the Iran-aligned hacking group TA450. TA450 Back with Salary Scam Emails appeared first on Penetration Testing.

Scams 80

Scams Penetration Testing Phishing Hacking 80

eSecurity Planet

NOVEMBER 7, 2022

REMnux is a free community distribution that ethical hackers, security researchers, and many other security pros can leverage to build their own labs and speed up malware analysis. As the founder and primary maintainer of REMnux, Lenny Zeltser likes to say: REMnux is for malware analysis as Kali is for penetration testing.

Engineering 139

Engineering Malware Penetration Testing Technology 139

CyberSecurity Insiders

DECEMBER 14, 2021

SANS Holiday Hack Challenge 2021 is back to help Santa Claus defeat cyber villains like Jack Frost to save the holiday season from a digital disaster. SANS Holiday Hack Challenge 2020 witnessed the participation of over 19,000 players and this year it’s expected to double up, as the event is being held online.

Hacking 90

Hacking Penetration Testing Social Engineering Mobile 90

Penetration Testing

MAY 7, 2024

Researchers at the MITRE Corporation have unveiled disturbing details of a cyberattack attributed to a Chinese state-sponsored hacking group.

Penetration Testing 58

Penetration Testing Hacking Malware 58

Graham Cluley

FEBRUARY 16, 2023

The owner of a Russian penetration-testing company has been found guilty of being part of an elaborate scheme that netted $90 million after stealing SEC earning reports.

Penetration Testing 79

Penetration Testing Hacking Cybersecurity Data breaches 79

Penetration Testing

FEBRUARY 1, 2024

In the ever-evolving landscape of cybersecurity threats, one name has recently emerged as a formidable adversary: the UAC-0027 hacking group.

Penetration Testing 82

Penetration Testing Hacking Cybersecurity DDOS 82

Penetration Testing

APRIL 10, 2024

In a recent hacking campaign exposed by Proofpoint, German organizations faced a multifaceted attack.

Penetration Testing 78

Penetration Testing Hacking Malware 78

Penetration Testing

NOVEMBER 27, 2023

The ransomware group Rhysida has publicly disclosed the hacking of the... The post Rhysida Ransomware Strikes Again: China Energy Engineering Corporation Falls Victim appeared first on Penetration Testing.

Engineering 82

Engineering Penetration Testing Ransomware Hacking 82

Penetration Testing

NOVEMBER 28, 2023

Last week, the IT systems of Holding Slovenske Elektrarne (HSE), Slovenia’s largest electricity supplier, were compromised in a hacking incident.

Penetration Testing 84

Penetration Testing Ransomware Hacking Malware 84

Penetration Testing

NOVEMBER 2, 2023

Boeing, a pivotal entity in the aerospace industry and defense technology, has confirmed it fell victim to a cyberattack, presumably orchestrated by the notorious hacking collective LockBit, accused of illicit access to confidential information... The post LockBit’s Latest Victim: Boeing’s Cybersecurity Compromise Unveiled appeared (..)

Penetration Testing 82

Penetration Testing Cybersecurity Technology Hacking 82

Hot for Security

JUNE 25, 2021

The Western District of Washington has sentenced a Ukrainian man to seven years in prison for his role in a hacking gang that are estimated to have caused more than one billion dollars worth of damage. If the recipient opened the included attachment, their computer would be infected by a version of the Carbanak malware.

Hacking 137

Hacking Penetration Testing Social Engineering Retail 137

SecureWorld News

AUGUST 8, 2022

Cybersecurity and Infrastructure Security Agency (CISA) and the Australian Cyber Security Centre (ACSC) released a joint Cybersecurity Advisory (CSA) providing details on the top malware strains of 2021. The top malware strains in 2021 included remote access Trojans (RATs), banking Trojans, information stealers, and ransomware.

Malware 84

Malware Banking Healthcare Penetration Testing 84

CyberSecurity Insiders

MAY 28, 2023

Malware Analysis: Explore malware types, their behavior, and the techniques used for analyzing and detecting them. Investigate malware’s propagation methods, evasion techniques, and methods for identifying and mitigating potential threats.

Cybersecurity 111

Cybersecurity Penetration Testing Social Engineering IoT 111

Penetration Testing

DECEMBER 4, 2023

Emerging from the shadows of Pyongyang, a North Korean hacking organization known as Andariel has been wreaking havoc in the digital realm, stealthily infiltrating South Korean firms and institutions, stealing sensitive data, and extorting... The post Andariel: North Korea’s Cyber Threat Actor Steals Data, Launches Ransomware Attacks (..)

Cyber threats 54

Cyber threats Penetration Testing Ransomware Hacking 54

Krebs on Security

MARCH 2, 2020

A large number of French critical infrastructure firms were hacked as part of an extended malware campaign that appears to have been orchestrated by at least one attacker based in Morocco, KrebsOnSecurity has learned. ‘FATAL’ ERROR.

DNS 262

DNS Penetration Testing Malware Hacking 262

SecureWorld News

FEBRUARY 8, 2024

Potential risks span from malware infections to denial-of-service attacks to theft of sensitive data. RELATED: Hacking the Olympics: 'Nearly Infinite Attack Surfaces' ] DHS cyber experts have conducted extensive vulnerability probes, penetration tests, and emergency planning to harden defenses at the big game.

Penetration Testing 104

Penetration Testing Surveillance Cyber Risk Malware 104

The Last Watchdog

JUNE 21, 2020

Balaban This ransomware was doing the rounds over spam generated by the Gameover ZeuS botnet, which had been originally launched in 2011 as a toolkit for stealing victim’s banking credentials and was repurposed for malware propagation. These included PClock, CryptoLocker 2.0, Crypt0L0cker, and TorrentLocker.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Penetration Testing

NOVEMBER 29, 2023

Access Now, SHARE Foundation, the Citizen... The post Serbian Spyware Scandal: Civil Society Under Siege appeared first on Penetration Testing. In an era increasingly defined by digital surveillance, a recent incident in Serbia has thrown a stark light on the use of invasive spyware to suppress civil society.

Spyware 80

Spyware Penetration Testing Surveillance Malware 80

Security Affairs

FEBRUARY 6, 2019

Malware researcher Marco Ramilli released for free the Malware Hunter tool a simple but interesting catching tool base on static YARA rules. Malware researcher Marco Ramilli released for free the Malware Hunter tool a simple but interesting catching tool base on static YARA rules. Malware Static Analysis.

Malware 87

Malware Computers and Electronics Penetration Testing Advertising 87

Security Affairs

DECEMBER 8, 2020

The cyber security giant FireEye announced that it was hacked by nation-state actors, likely Russian state-sponsored hackers. The company made the headlines because it was the victim of a hack, and experts blame Russia-linked hackers for the attack. launched an investigation into the hack. SecurityAffairs – hacking, BISMUTH).

Hacking 93

Hacking Cybersecurity Penetration Testing Cyber threats 93

Security Affairs

NOVEMBER 16, 2018

Marco Ramilli, founder and CEO at cyber security firm Yoroi has explained how to use Microsoft Powerpoint as Malware Dropper. Nowadays Microsoft office documents are often used to propagate Malware acting like dynamic droppers. The final payload looks like AzoRult Malware. Security Affairs – Microsoft Powerpoint, malware).

Malware 97

Malware Computers and Electronics Penetration Testing Advertising 97

Security Affairs

SEPTEMBER 28, 2020

Affiliates are essential to spread malicious code through hacking operations against businesses. Now REvil ransomware operators have published a post on a cybercrime forum to recruiting new affiliates, preferably hackers with penetration testing capabilities. SecurityAffairs – hacking, REvil ransomware).

Ransomware 139

Ransomware Penetration Testing Cybercrime Advertising 139

eSecurity Planet

JUNE 20, 2023

After surveying trusted penetration testing sources and published pricing, the cost of a penetration test for the average organization is $18,300. and different types of penetration tests (black box, gray box, white box, social engineering, etc.).

Penetration Testing 98

Penetration Testing Social Engineering Engineering eCommerce 98

Security Affairs

MAY 9, 2021

CISA has published an analysis of the FiveHands ransomware, the same malware that was analyzed a few days ago by researchers from FireEye’s Mandiant experts. The UNC2447 gang targeted organizations in Europe and North America using a broad range of malware over the past months. SecurityAffairs – hacking, FiveHands ransomware).

Ransomware 117

Ransomware Penetration Testing Malware Cybercrime 117

Hot for Security

APRIL 19, 2021

Notorious FIN7 gang stole payment card details from retailers around the world Cybercrime gang posed as penetration testing firm to recruit hackers. More details on how the malware operated can be read about in this technical paper by Bitdefender Labs. Gorman of the Western District of Washington. ”

Penetration Testing 144

Penetration Testing Retail Social Engineering Cybersecurity 144

Security Affairs

MAY 14, 2019

The popular expert Marco Ramilli provided a follow up to its Malware classification activity by adding a scripting section which would be useful for several purposes. On 2016 I was working hard to find a way to classify Malware families through artificial intelligence (machine learning).

Malware 66

Malware Artificial Intelligence Computers and Electronics Penetration Testing 66

Security Affairs

NOVEMBER 21, 2022

Researchers at Google Cloud identified 34 different hacked release versions of the Cobalt Strike tool in the wild. Cobalt Strike is a paid penetration testing product that allows an attacker to deploy an agent named ‘Beacon’ on the victim machine. SecurityAffairs – hacking, cybersecurity). Pierluigi Paganini.

Penetration Testing 89

Penetration Testing Hacking Cybersecurity Cybercrime 89

Hot for Security

JUNE 25, 2021

The Western District of Washington has sentenced a Ukrainian man to seven years in prison for his role in a hacking gang that are estimated to have caused more than one billion dollars worth of damage. If the recipient opened the included attachment, their computer would be infected by a version of the Carbanak malware.

Hacking 52

Hacking Penetration Testing Social Engineering Retail 52

Security Affairs

APRIL 7, 2023

Cobalt Strike is a paid penetration testing product that allows an attacker to deploy an agent named ‘Beacon’ on the victim machine. In essence, Defendants are able to leverage cracked versions of Cobalt Strike to brutally force their way into victim machines and deploy malware.” ” reads the court order.

Penetration Testing 80

Penetration Testing Ransomware Malware Hacking 80

Security Affairs

APRIL 18, 2021

The Carbanak gang (aka FIN7 , Anunak or Cobalt ) stole over a billion euros from banks across the world, the name “Carbanak” comes with the name of the malware they used to compromise computers at banks, other financial institutions, restaurants, and other industries. SecurityAffairs – hacking, FIN7). Pierluigi Paganini.

System Administration 111

System Administration Penetration Testing Malware Banking 111